OCSPNoCheckExt Plug-in Module
Chapter
4
Certificate Extension Plug-in Modules
219
During installation, Certificate Management System automatically creates an
instance of the OCSP no check extension policy. See “OCSPNoCheckExt Rule” on
page 220.
Configuration Parameters of OCSPNoCheckExt
In the CMS configuration file, the
OCSPNoCheckExt
module is identified as
<subsystem>.Policy.impl.OCSPNoCheckExt.class=com.netscape.
cms.policy.OCSPNoCheckExt
, where
<subsystem>
is
ca
or
ra
(prefix identifying
the subsystem).
In the CMS window, the module is identified as
OCSPNoCheckExt
. Figure 4-22
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-22
Parameters defined in the OCSPNoCheckExt module
The configuration shown in Figure 4-22 creates a policy rule named
OCSPNoCheckExtForResponderCert
, which enforces a rule that the server should
set the OCSP no check extension in OCSP responder certificates only.
Table 4-21 provides details for each of these parameters.
Содержание Certificate Management System 6.0
Страница 1: ...Plug Ins Guide Netscape Certificate Management System Version6 0 March 2002...
Страница 10: ...10 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 126: ...ValidityConstraints Plug in Module 126 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 266: ...LdapSubjAttrMap Plug in Module 266 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 324: ...DNs in Certificate Management System 324 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 370: ...CA Certificates and Extension Interactions 370 Netscape Certificate Management System Plug Ins Guide March 2002...